ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.opera.com/docs/changelogs/windows/951/	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/30937	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2008/1998/references	vdb-entry x_refsource_VUPEN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Resource:

x_refsource_CONFIRM

x_transferred

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:09 Jul, 2008 | 00:41

Updated At:23 Apr, 2026 | 00:35

Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>windows>>*

Opera

>>opera>>Versions up to 9.51(inclusive)

cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/30937	cve@mitre.org	Vendor Advisory
http://www.opera.com/docs/changelogs/windows/951/	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/1998/references	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	cve@mitre.org	N/A
http://secunia.com/advisories/30937	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.opera.com/docs/changelogs/windows/951/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/1998/references	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	af854a3a-2127-422b-91ae-364da2661108	N/A

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Source: cve@mitre.org

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1323Records found

CVE-2015-0308

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.65% / 92.53%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CVE-2015-4430

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-62.73% / 98.40%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-5117.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2014-9158

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-14.24% / 94.47%

7 Day CHG+0.71%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-8461.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-4716

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-19.52% / 95.48%

7 Day CHG+4.17%

Published-21 Oct, 2015 | 18:00

Updated-06 May, 2026 | 22:30

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation ownCloud GmbH

Product-windows owncloud_server owncloud n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2014-9164

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.70% / 93.01%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-9159

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-27.48% / 96.48%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-8460.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2020-1350

Matching Score-8

Matching Score-8

Product-windows_server_2008 windows_server_2019 windows_server_2016 windows_server_2012 Windows Server Windows Server, version 1909 (Server Core installation)Windows Server, version 2004 (Server Core installation)Windows Server, version 1903 (Server Core installation)Windows

CVSS Score-10||CRITICAL

EPSS-93.81% / 99.86%

7 Day CHG~0.00%

Published-14 Jul, 2020 | 22:54

Updated-29 Oct, 2025 | 13:55

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

CWE ID-CWE-20

Improper Input Validation

CVE-2014-9163

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.19% / 87.11%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

Product-flash_player windows linux_kernel mac_os_x n/a Flash Player

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2015-0014

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-80.78% / 99.16%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_7 windows_8.1 windows_server_2008 windows_vista windows_8 windows_server_2012 windows_server_2003 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-9162

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.90% / 83.45%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2014-9160

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-49.31% / 97.82%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-8438

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.95% / 91.51%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-8445

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8461

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8457

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-22.95% / 95.97%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-8449

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-34.61% / 97.06%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-8459

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8458

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8454

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-16.98% / 95.05%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8455 and CVE-2014-9165.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-8455

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-16.98% / 95.05%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-8443

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.92% / 93.48%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-4445

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.14% / 88.77%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4438, CVE-2015-4441, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CVE-2014-8446

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-22.24% / 95.88%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-8439

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-34.44% / 97.05%

7 Day CHG~0.00%

Published-25 Nov, 2014 | 23:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

Product-linux_kernel mac_os_x windows flash_player macos air_sdk air air_sdk_\&_compiler n/a Flash Player

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-416

Use After Free

CVE-2014-8440

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-87.98% / 99.49%

7 Day CHG+1.17%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-8456

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8441

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.40% / 92.88%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-8460

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-30.14% / 96.73%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-7898

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-10||HIGH

EPSS-28.81% / 96.61%

7 Day CHG+5.45%

Published-09 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows ole_point_of_sale_driver n/a

CVE-2020-0690

Matching Score-8

Matching Score-8

Product-windows_server_2016 windows_server_2019 windows_10 Windows Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1903 for x64-based Systems Windows Server Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems

CVSS Score-9.8||CRITICAL

EPSS-13.25% / 94.23%

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-04 Aug, 2024 | 06:11

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

Vendor-Microsoft Corporation

CVE-2015-4433

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.67% / 91.31%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-3122.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2020-0609

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-88.77% / 99.53%

7 Day CHG-1.01%

Published-14 Jan, 2020 | 23:11

Updated-04 Aug, 2024 | 06:11

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

Vendor-Microsoft Corporation

Product-windows_server_2012 windows_server_2016 windows_server_2019 Windows Server

CVE-2015-4431

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.54% / 90.35%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4447

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.10% / 90.87%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4438, CVE-2015-4441, CVE-2015-4445, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CVE-2015-4448

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.52% / 85.57%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5095, CVE-2015-5099, CVE-2015-5101, CVE-2015-5111, CVE-2015-5113, and CVE-2015-5114.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader acrobat_reader_dc windows macos acrobat_dc n/a

CWE ID-CWE-416

Use After Free

CVE-2015-3041

Matching Score-8

Matching Score-8

Product-enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary suse_linux_workstation_extension mac_os_x windows flash_player suse_linux_enterprise_desktop enterprise_linux_server_supplementary_eus linux_kernel enterprise_linux_workstation_supplementary opensuse n/a

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-3104

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.48% / 89.21%

7 Day CHG~0.00%

Published-10 Jun, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CVE-2015-3129

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.49% / 93.33%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-3109

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.61% / 92.50%

7 Day CHG~0.00%

Published-24 Jun, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Photoshop CC before 16.0 (aka 2015.0.0) allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-photoshop_cc windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-6321

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-93.27% / 99.81%

7 Day CHG+0.25%

Published-11 Nov, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka "Microsoft Schannel Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_rt windows_7 windows_8.1 windows_server_2008 windows_vista windows_8 windows_rt_8.1 windows_server_2012 windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-3131

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.49% / 93.33%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CVE-2015-3084

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.35% / 90.16%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3077 and CVE-2015-3086.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CVE-2015-3119

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.67% / 91.31%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-3087

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-65.31% / 98.50%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CVE-2015-3068

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.63% / 87.94%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-284

Improper Access Control

CVE-2015-3061

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.63% / 87.94%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-284

Improper Access Control

CVE-2015-3050

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.26% / 93.93%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3051, CVE-2015-3052, CVE-2015-3056, CVE-2015-3057, CVE-2015-3070, and CVE-2015-3076.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3100

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.39% / 87.53%

7 Day CHG~0.00%

Published-10 Jun, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3064

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.63% / 87.94%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-284

Improper Access Control

CVE-2015-3128

Matching Score-8

Matching Score-8